#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
shoucheng3/joniles__mpxj_cve-2020-35460_8-3-4Exploit for CVE-2020-35460 targeting MPXJ project management library, enabling arbitrary code execution via crafted project files in Java, .Net, and…
shoucheng3/apache__dolphinscheduler_cve-2022-34662_2-0-9Proof-of-concept exploit for CVE-2022-34662 targeting Apache DolphinScheduler, enabling remote code execution via crafted SQL injection in the…
shoucheng3/apache__dolphinscheduler_cve-2022-26884_2-0-5Proof-of-concept exploit for CVE-2022-26884 targeting Apache DolphinScheduler, enabling remote code execution via crafted requests to the workflow…
r0otk3r/cve-2025-2294Python exploit script for CVE-2025-2294, an unauthenticated Local File Inclusion vulnerability in WordPress Kubio AI Page Builder ≤ 2.5.1. Supports…
glynzr/cve-2023-50564Pluck v4.7.18 - Remote Code Execution (RCE)
d0n601/cve-2025-6586Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
d0n601/cve-2025-6220Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
arsalanraja987/java-cve-2021-29425-tika-xxeProof-of-concept exploit for CVE-2021-29425, an XML External Entity (XXE) vulnerability in Apache Tika, demonstrating file disclosure and SSRF via…
rupturainfosec/cve-2023-26563-26564-26565Proof-of-concept exploits for three vulnerabilities in Syncfusion file managers: directory traversal leading to arbitrary file read/write/delete, and…
ch1keen/cve-2025-50360Report and PoC of Heap Buffer Overflow in Pepper Language before version 0.1.1, commit 961a5d9988c5986d563310275adad3fd181b2bb7
vincentinttsh/cve-2022-28346An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods…
ramzerk/cve-2024-46987This Rust PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0).
kevinbackhouse/djvulibre-poc-cve-2025-53367Proof-of-concept exploit for CVE-2025-53367, a vulnerability in the DjVuLibre library. Demonstrates exploitation of a memory corruption bug in DjVu…
d0n601/cve-2025-9216StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.4.0 - Authenticated (Subscriber+)…
anchor0221/cve-2025-50460Technical Details and Exploit for CVE-2025-50460
nickops87/spring4shell-python-firewall-pocProof-of-Concept (POC) of a simple firewall in Python designed to mitigate the Spring4Shell (CVE-2022-22965) RCE attack by inspecting and blocking…
rashedhasan090/cve-2025-55182-mitigatorCLI scanner that detects likely vulnerable React/Next.js dependencies for CVE-2025-55182 and provides mitigation targets. Supports JSON output and…
shoucheng3/x-stream__xstream_cve-2021-21345_1-4-15Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.
